Audit log or report name
Data retention time
|Admin audit log||6 months|
|Calendar audit log||6 months|
|OAuth Token audit log||6 months|
|Mobile audit log (Google Apps Unlimited)||6 months|
|SAML audit log||6 months|
|Drive audit log (Google Apps Unlimited)||6 months|
|Email log search||30 days|
|Account activity reports||6 months|
|Security reports||6 months|
|Groups audit log||6 months|
|Audit data retrieved using the API||6 months|
|Reporting data retrieved using the API||15 months|
For any audit log or report not mentioned above the retention time should be 6 months.
There's nothing we can do on our end after the period of the data retention time, we have no way to recover it, even in Google end.
For message tracing in Google end, the data retention time is seven days.